CCM-21851: Add missing pack specification to dev config

config/suppliers/pack-specification/notify-admail-colour-whitemail.json

@@ -0,0 +1,55 @@
+{
+  "assembly": {
+    "duplex": true,
+    "envelopeId": "economy-c5",
+    "features": [
+      "ADMAIL"
+    ],
+    "paper": {
+      "colour": "WHITE",
+      "id": "paper-std-white-80",
+      "name": "Standard White 80gsm",
+      "recycled": true,
+      "size": "A4",
+      "weightGSM": 80
+    },
+    "printColour": "COLOUR"
+  },
+  "billingId": "insert-admail-colour",
+  "constraints": {
+    "blackCoveragePercentage": {
+      "operator": "LESS_THAN",
+      "value": 20
+    },
+    "colourCoveragePercentage": {
+      "operator": "LESS_THAN",
+      "value": 10
+    },
+    "deliveryDays": {
+      "operator": "LESS_THAN",
+      "value": 2
+    },
+    "sheets": {
+      "operator": "LESS_THAN",
+      "value": 5
+    },
+    "sides": {
+      "operator": "LESS_THAN",
+      "value": 10
+    }
+  },
+  "createdAt": "2026-01-12T00:00:00.000Z",
+  "description": "Admail economy tariff with whitemail envelope and colour printing",
+  "id": "notify-admail-colour-whitemail",
+  "name": "Admail (colour whitemail)",
+  "postage": {
+    "deliveryDays": 4,
+    "id": "admail-economy",
+    "maxThicknessMm": 5,
+    "maxWeightGrams": 100,
+    "size": "STANDARD"
+  },
+  "status": "PROD",
+  "updatedAt": "2026-01-12T00:00:00.000Z",
+  "version": 1
+}

config/suppliers/supplier-pack/supplier1-notify-admail-colour-whitemail.json

@@ -0,0 +1,7 @@
+{
+  "approval": "APPROVED",
+  "id": "supplier1-notify-admail-colour-whitemail",
+  "packSpecificationId": "notify-admail-colour-whitemail",
+  "status": "PROD",
+  "supplierId": "supplier1"
+}

infrastructure/terraform/components/api/api_gateway_base_path_mapping.tf

@@ -2,4 +2,13 @@ resource "aws_api_gateway_base_path_mapping" "main" {
   api_id      = aws_api_gateway_rest_api.main.id
   stage_name  = aws_api_gateway_stage.main.stage_name
   domain_name = aws_api_gateway_domain_name.main.domain_name
+
+  depends_on = [
+    aws_api_gateway_stage.main,
+    aws_api_gateway_domain_name.main
+  ]
+
+  lifecycle {
+    replace_triggered_by = [aws_api_gateway_rest_api.main]
+  }
 }

infrastructure/terraform/components/api/api_gateway_rest_api.tf

@@ -3,7 +3,9 @@ resource "aws_api_gateway_rest_api" "main" {
   body                         = local.openapi_spec
   description                  = "Suppliers API"
   disable_execute_api_endpoint = var.disable_gateway_execute_endpoint
-
+  endpoint_configuration {
+    types = ["REGIONAL"]
+  }
   lifecycle {
     replace_triggered_by = [terraform_data.rest_api_security_policy]
   }

infrastructure/terraform/components/api/api_gateway_rest_api_tls.tf

@@ -1,11 +1,12 @@
 locals {
-  rest_api_security_policy      = "SecurityPolicy_TLS12_PFS_2025_EDGE"
-  rest_api_endpoint_access_mode = "STRICT"
+  # Endpoint type for the REST API
+  # Security policy is managed at the custom domain level (see api_gateway_domain.tf: security_policy = "TLS_1_2")
+  # STRICT endpoint access mode is not supported with REGIONAL endpoints
+  rest_api_endpoint_type = "REGIONAL"
 }
 
 resource "terraform_data" "rest_api_security_policy" {
   input = {
-    security_policy      = local.rest_api_security_policy
-    endpoint_access_mode = local.rest_api_endpoint_access_mode
+    endpoint_type = local.rest_api_endpoint_type
   }
 }

infrastructure/terraform/components/api/api_gateway_stage.tf

@@ -61,4 +61,8 @@ resource "aws_api_gateway_stage" "main" {
       "status" : "$context.status"
     })
   }
+
+  lifecycle {
+    replace_triggered_by = [aws_api_gateway_rest_api.main]
+  }
 }

infrastructure/terraform/components/api/locals.tf

@@ -7,8 +7,6 @@ locals {
   openapi_spec = templatefile("${path.module}/resources/spec.tmpl.json", {
     APIG_EXECUTION_ROLE_ARN    = aws_iam_role.api_gateway_execution_role.arn
     AWS_REGION                 = var.region
-    SECURITY_POLICY            = local.rest_api_security_policy
-    ENDPOINT_ACCESS_MODE       = local.rest_api_endpoint_access_mode
     AUTHORIZER_LAMBDA_ARN      = module.authorizer_lambda.function_arn
     GET_LETTER_LAMBDA_ARN      = module.get_letter.function_arn
     GET_LETTERS_LAMBDA_ARN     = module.get_letters.function_arn

infrastructure/terraform/components/api/resources/spec.tmpl.json

@@ -358,6 +358,9 @@
       ]
     }
   },
-  "x-amazon-apigateway-endpoint-access-mode": "${ENDPOINT_ACCESS_MODE}",
-  "x-amazon-apigateway-security-policy": "${SECURITY_POLICY}"
+  "x-amazon-apigateway-endpoint-configuration": {
+    "types": [
+      "REGIONAL"
+    ]
+  }
 }